This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer File: SAw7k_8qNPv6WuglVvZwNAy11ck.cer (raw, json) Hash identifier: HnOemD6NNY0RA85s0EgSNqMJESaBzu+0LqfC++8hyg0= Subject key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F33264470AA6AFF87078A25227A06 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205796 AS: 209365 IP: 85.208.100.0/22 IP: 185.206.60.0/22 IP: 2a09:85c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:33:26:44:70:aa:6a:ff:87:07:8a:25:22:7a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:cd:0a:18:44:6c:5c:e8:1c:d2:23:c1:3f: 7e:07:0b:e8:87:59:be:b7:e6:e5:b1:be:5d:86:59: 6e:d8:ba:db:07:d0:ca:d4:cf:31:4d:0c:3b:e1:19: 47:79:5a:f0:de:5f:33:3c:f3:00:6e:82:e8:61:c2: 08:8b:e5:8b:32:09:f4:96:98:a4:8a:96:6e:4b:14: 51:7d:0c:6d:6a:ce:97:50:18:e3:9d:bb:df:84:59: b9:8e:de:39:c8:2a:59:87:3d:19:dd:cb:48:57:0f: 13:7d:c6:16:6c:a9:2a:cc:9f:db:80:73:c9:8f:45: 16:99:b0:87:a4:7c:17:14:fb:19:bb:93:79:39:23: 55:9e:ce:10:83:28:81:60:01:d6:39:09:be:f6:1c: 15:51:f4:2a:7c:8a:c9:5e:8e:4f:1a:85:c6:f6:74: f5:3b:47:eb:39:63:54:d8:ca:b8:82:bc:4b:f6:39: d9:39:e8:e4:61:fa:72:ed:7d:fa:03:61:0e:41:8c: 7d:e0:c2:98:c2:87:5c:2c:42:50:e5:9d:58:3b:25: 50:c4:a5:c4:2c:52:08:88:28:9c:7b:eb:50:4a:a1: fe:e0:48:34:c1:36:72:b1:55:89:d0:82:b4:3a:ef: 31:61:05:ed:a5:d7:5b:68:14:5d:92:46:f6:24:82: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.100.0/22 185.206.60.0/22 IPv6: 2a09:85c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205796 209365 Signature Algorithm: sha256WithRSAEncryption 8e:d0:95:c6:0e:ef:b6:85:63:fa:fe:60:b1:06:2f:52:cb:c2: 4f:07:ea:32:10:7b:70:3e:ba:b1:cc:02:a6:37:ec:bd:13:6a: b1:da:b5:01:b5:9e:ce:16:49:4c:dd:7b:0e:1f:ab:d5:bb:0c: 86:21:fc:fb:a1:a0:ff:e5:4e:26:e4:b2:2a:c7:ba:09:3f:ef: f7:74:6b:66:a3:d7:9f:df:80:2d:36:d7:de:a8:f4:cb:5b:db: 85:ad:7d:e0:e9:5e:af:d2:54:06:45:86:a8:5c:18:2a:ad:18: a9:69:81:b0:f8:a7:e4:3b:7d:18:d9:c7:21:3d:d8:06:c9:fd: 5a:95:35:15:f2:2f:ae:75:bf:83:a1:29:63:4b:8e:cb:55:1a: 68:81:d7:f4:98:41:c9:07:f7:6d:99:37:3a:af:c7:39:6a:22: 3a:b5:5c:eb:29:e7:45:49:28:6d:c7:00:12:b1:cc:1d:c2:d3: fc:1e:0e:48:af:e2:04:60:67:0c:8b:27:00:cd:a5:99:7f:e9: 2c:7b:8e:f5:a7:44:75:bf:bc:9b:2d:e1:d7:08:04:16:5a:c6: b0:9b:27:6d:03:33:42:9a:3a:67:84:b0:d4:f4:1c:7c:5b:f1: 3a:83:cc:4c:c7:0f:55:cf:a7:b5:ec:77:17:df:59:72:a0:35: 78:6a:44:83 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt8fzMmRHCqav+HB4olInoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODBjM2I5M2ZmMmEzNGZiZmE1YWU4MjU1NmY2NzAzNDBjYjVkNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJPNChhEbFzoHNIjwT9+Bwvoh1m+ t+blsb5dhllu2LrbB9DK1M8xTQw74RlHeVrw3l8zPPMAboLoYcIIi+WLMgn0lpik ipZuSxRRfQxtas6XUBjjnbvfhFm5jt45yCpZhz0Z3ctIVw8TfcYWbKkqzJ/bgHPJ j0UWmbCHpHwXFPsZu5N5OSNVns4QgyiBYAHWOQm+9hwVUfQqfIrJXo5PGoXG9nT1 O0frOWNU2Mq4grxL9jnZOejkYfpy7X36A2EOQYx94MKYwodcLEJQ5Z1YOyVQxKXE LFIIiCice+tQSqH+4Eg0wTZysVWJ0IK0Ou8xYQXtpddbaBRdkkb2JIIFhQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFEgMO5P/KjT7+lroJVb2cDQMtdXJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzE4MDBh NC01MGZjLTRmZjgtOWUzNi00OWM2ZmRiYmFmYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMTgwMGE0 LTUwZmMtNGZmOC05ZTM2LTQ5YzZmZGJiYWZiNy8xL1NBdzdrXzhxTlB2Nld1Z2xW dlp3TkF5MTFjay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCVdBkAwQCuc48MA0EAgACMAcDBQAqCYXAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMj5AIDAzHVMA0GCSqGSIb3DQEBCwUAA4IB AQCO0JXGDu+2hWP6/mCxBi9Sy8JPB+oyEHtwPrqxzAKmN+y9E2qx2rUBtZ7OFklM 3XsOH6vVuwyGIfz7oaD/5U4m5LIqx7oJP+/3dGtmo9ef34AtNtfeqPTLW9uFrX3g 6V6v0lQGRYaoXBgqrRipaYGw+KfkO30Y2cchPdgGyf1alTUV8i+udb+DoSljS47L VRpogdf0mEHJB/dtmTc6r8c5aiI6tVzrKedFSShtxwASscwdwtP8Hg5Ir+IEYGcM iycAzaWZf+kse471p0R1v7ybLeHXCAQWWsawmydtAzNCmjpnhLDU9Bx8W/E6g8xM xw9Vz6e17HcX31lyoDV4akSD -----END CERTIFICATE-----Generated at Sun Jan 25 19:14:10 2026 by rpki-client